Fixes openclaw#62988

Purpose

Make openclaw sandbox explain immediately show the sandbox file-system exposure (effective mounts), so users can reason about permission boundaries at a glance.

Changes

• JSON output: add sandbox.mounts: Array<{ source, hostRoot, containerRoot, writable }>
• Text output: print a new Effective mounts: section after Effective sandbox:
• Ordering: deterministic mounts order (workspace → agent → bind)

Test plan

• pnpm -s test src/commands/sandbox-explain.test.ts

Local output (manual spot-check)

pnpm -s openclaw sandbox explain

Effective sandbox:
  ...

Effective mounts:
  - source: workspace containerRoot: /workspace hostRoot: /Users/luo/.openclaw/sandboxes/agent-main-f331f052 writable: false

Made with Cursor